Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 05:45

General

  • Target

    b3ef930d89e19f3223a9aad78078aa73.pdf

  • Size

    86KB

  • MD5

    b3ef930d89e19f3223a9aad78078aa73

  • SHA1

    108b1d8b7d3b3d01aba9b97b55cbc40c120b6c17

  • SHA256

    9594afb73398cb1e469e9529a92557feb1dfa7b674a22e16571642f398d06bd7

  • SHA512

    2be0b5925b29e8dd97feed5a4a8fecc80aa61180d2cc1fb2667b3b18b2b769a0e346b63bfe1d083f9dbf1b8f71341c1152a767c788aff908a7e3a82a519e59fc

  • SSDEEP

    1536:H93VjskCzPgQ6ZECnGo+3ivqIQs/oVR8hboyLCDUyYtJYEMOBhpN8lOF1nHBFVl/:HrJEC5+34LQs/5hbfWg7yWx8lOXnVB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b3ef930d89e19f3223a9aad78078aa73.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8c01c7dd4038aae340421ef2905370d6

    SHA1

    a3c519d689a8b487b0d2135b426996894a75e48b

    SHA256

    b1a463db216684fa42097fd12d6f772564bc322239a626c8918bc8eb427ce77c

    SHA512

    6adca2b540afb614b8d6ac52eee1fe594e1a0157ad3d8958db4ed2b0533967e8233cdfbf7f3637f67cebf3a590a24b938f3007dc064f3243c91f952e52006464